Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks

What happened?

Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain higher privileges. Tracked as CVE-2026-85851, the flaw was disclosed on October 13, 2026, and carries a CVSS base score of 7.8. Microsoft rates it Important. The issue involves a use-after-free memory error and affects several Windows 11 releases and Windows Server 2025. According to the supplied Microsoft advisory, successful exploitation lets an attacker move from a low integrity level to a medium integrity level.

Key details

• Exploitation requires local access and low privileges but no user interaction.
• Microsoft rates the flaw Important with a CVSS base score of 7.8.
• The flaw is tracked as CVE-2026-85851 and was disclosed on October 13, 2026.
• The vulnerability is a use-after-free error (CWE-416) where software accesses memory after it has been released.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.